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14. (New) The method of claim 13, wherein the at least one performance quantity is processed 
in a first processor, and the at least one actuator is controlled with at least one controlled variable 
from one of the first processor and at least one second processor, the processors exchanging 
information. 



15. (New) The method of claim 13, wherein a distinction is made between performance 
quantities of a first type and of a second type, the performance quantities of the first type being 
processed in the functionalities of the at least two processors, and the performance quantities of 
the second type being processed only in the functionalities of one of the at least two processors. 

16. (New) The method of claim 15, wherein a distinction is made between controlled variables 
of the first type and controlled variables of the second type, the controlled variables of the first 
type being formed by the functionalities of a first processor from the performance quantities 
which are processed in the functionalities of a first processor, and the controlled variables of the 
second type being formed by the functionalities of the first processor from the performance 
quantities which are processed in the functionalities of a second processor, and the functionalities 
of the at least two processors exchange information .—. . 

Remarks 

This Preliminary Amendment cancels without prejudice original claims 1 to 8 in 
the underlying PCT Application No. PCT/DE00/02546, and adds without prejudice new claims 
9 to 16. The new claims conform the claims to U.S. Patent and Trademark Office rules and do 
not add new matter to the application. 

In accordance with 37 C.F.R. § 1.121(b)(3), the Substitute Specification 
(including the Abstract, but without the claims) contains no new matter. The amendments 
reflected in the Substitute Specification (including Abstract) are to conform the Specification and 
Abstract to U.S. Patent and Trademark Office rules or to correct informalities. As required by 37 
C.F.R. § 1.121(b)(3)(iii) and § 1.125(b)(2), a Marked Up Version Of The Substitute Specification 
comparing the Specification of record and the Substitute Specification also accompanies this 
Preliminary Amendment. In the Marked Up Version, underlining indicates added text and 
bracketing indicated deleted text. Approval and entry of the Substitute Specification (including 
Abstract) is respectfully requested. 
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The underlying PCT Application No. PCT/DE00/02546 includes an International 
Search Report, dated November 29, 2000. The Search Report includes a list of documents that 
were uncovered in the underlying PCT Application. A copy of the Search Report accompanies 
this Preliminary Amendment. 

The underlying PCT application also includes an International Preliminary 
Examination Report, dated November 14, 2001. An English translation of the International 
Preliminary Examination Report accompanies this Preliminary Amendment. 

Applicants assert that the subject matter of the present application is new, non- 
obvious, and useful. Prompt consideration and allowance of the application are respectfully 
requested. 
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DEVICE AND METHOD OF CONTROLLING A DRIVE UNIT 



[Background Information 
] FIELD OF THE INVENTION 

The present invention relates to a device and a method of 
controlling a drive unit, in particular, an internal 
combustion engine in a vehicle. 

BACKGROUND INFORMATION 

German Published Patent Application No . 42 31 449 [Al 
describes] discusses a device for controlling the drive power 
of an engine having at least two control units, a first 
control unit being connected to a first group of measuring 
devices and a second control unit being connected to a second 
group of measuring devices of the same measuring element. 
There [are] may be special advantages of an engine which has 
two independent cylinder blocks and is controlled by two 
control units or controllers. Due to the fact that multiple 
control units are connected to only one measuring element for 
detection of the performance quantity, a high availability and 
operating reliability [are] may be guaranteed. The system 
presented here having two control units has an asymmetrical 
functionality and program code and originally has a main 
computer, which is heavily utilized, and an emergency 
computer, which is only lightly utilized. Individual functions 
of the main computer are shifted to the emergency computer to 
optimize computation time and memory. 

Instead of two controllers, German Published Patent 
Application No . 35 39 407 [Al describes] discusses a computer 
system having two processors for regulating characteristic 
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quantities of an internal combustion engine. The two 
processors share the computer load in normal operation, each 
of the two processors being able to maintain emergency 
operation as an emergency computer in the event of 
5 malfunction. Thus, only the functions needed in emergency 
operation are implemented on both processors. However, in 
emergency operation these functions have a reduced extent of 
performance and function in comparison with normal operation. 
Due to this increased redundancy and division of work in 
10 normal computer operation, which is possible as part of the 
emergency function, reliability and operating speed may be 
increased. 

Due to the asymmetrical division of functions of each 
15 controller or processor, the respective functionality must be 
defined, implemented, documented, tested, and maintained 
separately. Likewise, both controllers or computers must be 
equipped in the development stage with expensive measuring 
[means] arrangements and/or emulation [means] arrangements . 
20 Due to the asymmetrical definition of the functionality and 
therefore the asymmetrical definition of the systems, 
additional errors may occur due to a mix-up during assembly of 
the components, for example. At the same time, a further 
development of or change in functionality in the existing 
25 system requires that both controllers or computers and their 
respective functionalities be taken into account, which 
consequently is very complicated, time consuming and cost 
intensive . 

30 This results in the object of implementing an engine control 
system having a very high functionality which is optimized 
with respect to [the related art] other prior systems . 

[This is achieved through the characterizing features of the 
35 independent claims.] 
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[Advantages of the Invention 
] SUMMARY OF THE INVENTION 

A control system of a drive unit, in particular, of an 
internal combustion engine [having] including a control unit 
5 where the control unit contains at least two computers, is 
described. The functionality of the control unit or 
controller, too complex for one computer, [is] may be divided 
among at least two computers in one controller. The program 
memories of the two computers or computing units contain the 

10 same program code, so that both computers may have an 
identical possible functionality. Thus the individual 
functionalities [are advantageously] may be selectable to be 
less complex than the required overall functionality, so that 
the complex overall functionality may nevertheless be obtained 

15 via all computers or processors. In use, largely the same 

program code [is] may be run through, although there may be 
individual parts that are present in both memories or 
computers but are processed asymmetrically, i.e., only in or 
from one memory. 

20 

The functions may [advantageously] be divided among more than 
two computers, or additional computers may be present in the 
overall system, although they execute a different program 
code, i.e., they have a different functionality. The computers 
25 may then be appropriately accommodated in different 
controllers . 

The two computers having identical possible functionalities 
may appropriately exchange information, e.g., over a serial or 

30 parallel bus system such as a CAN bus or other serial 

interfaces or a DPRAM. It [is also] may be advantageous that 
the functionality need only be defined, implemented, 
documented, tested and maintained once due to the symmetrical 
division of function and the identical functionalities, but it 

35 may be used for both computers or computer units. 
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In manufacturing the controller, e.g., in prototype building 
or in production, the program memory which contains the 
program code and thus the functionality [is advantageously] 
may be assembled twice in the controller, so there [is] may be 
5 no possibility of mix-ups. 

In the development and application phase, one may 
appropriately concentrate on one of the symmetrical sides. It 
[is] may be sufficient to equip one side with expensive 

10 measuring [means] arrangements or emulation devices. Due to 
the symmetrical division of functions and the symmetrical 
functionality on both computers, a modular design of the 
controller and the controller program [is] may be possible. 
This makes further developments through changes in existing 

15 functions and/or introduction of new functions much easier and 
faster in comparison with an asymmetrical structure because 
there [are] may be no interface problems or timing problems 
between the functions distributed among the computers. This 
results in lower development costs and shorter development 

20 times. 

The main point is thus the symmetry and functionality of the 
computer system and the use of program memories [having] 
including a completely identical program code for the at least 
25 two computers or computing units in the controller. 

[Additional advantageous embodiments are characterized in the 
description and claims. 

30 Drawing 

] The present invention is [explained] described in greater 
detail below on the basis of the exemplary embodiments 
illustrated in the [drawing] drawings . 

35 
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BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 shows a block diagram of a control unit [having] 
including two computing elements or computers which control at 
least one performance quantity in the vehicle, [preferably] 
5 for example the performance of a drive unit, in particular of 
an internal combustion engine. 

Figure 2 illustrates functional relationships between the two 
computers in the controller and their environment. 

10 

Figure 3 shows the [concrete] exemplary embodiment [in] with 
functional relationships based on lambda regulation for 
calculation of injection in the internal combustion engine. 

15 

[Description of the Exemplary Embodiments 
] DETAILED DESCRIPTION 

Figure 1 shows an electronic controller 100, which includes at 
least two computers 101 and 102, an input module 103, an 

20 output module 104 and a bus system 105. Other components 

and/or modules may optionally be connected to bus system 105 
as indicated by element 106. These additional optional 
elements include, for example, additional memory elements 
and/or an additional bus input/output interface, e.g., for 

25 diagnosis or for connection of controller 100 to other 

controllers. Input module 103 may be combined with output 
module 104 as well as the input/output module. Computer 101 
contains, among other things, a processor 109 and a program 
memory 107 assigned to this processor 109. The program code 

30 filed in program memory 107 corresponds to the possible 

functionality with regard to the control or regulation of at 
least one performance quantity such as that [which is] it may 
be processable by processor 109. It [is] may be advantageous 
for the reasons given above if first computer 101 and second 

35 computer 102 have a completely identical design, likewise with 
a processor 110 and a program memory 108 allocated to them. 
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However, different computers may optionally also be used as 
long as the possible functionality of both computing units is 
identical* Input module 103 receives signals which represent 
measured performance quantities of the drive unit, the drive 
5 train and/or the vehicle or from which such performance 

quantities may be derived. These may be [In particular, these 
are] performance quantities which may be analyzed to control 
an internal combustion engine. These signals [are] may be 
picked up by measuring devices 111 through 113, in particular 
10 sensors, and [are] may be sent to input module 103 via input 
lines 114 through 116. 

Furthermore, signals which actuate control elements or 
actuators for setting at least one performance quantity of the 

15 drive unit, in particular the internal combustion engine of 
the vehicle, [are also] may be output via output module 104. 
The corresponding signals for controlling actuators 117 
through 119 [are] may be delivered via output lines 120 
through 122. Depending on the input signals, performance 

20 quantities and/or internal quantities derived from them, 

computers 101 and 102 form values for the controlled variables 
which [are to be] may be output and which set the control 
elements in the sense of a predetermined control or regulatory 
strategy as part of the programs implemented therein. 

25 Controller 100 [is preferably] may be a control unit for 
controlling a drive unit, in particular of an internal 
combustion engine, of a vehicle, so the position of an 
operating element that may be operated by the driver [is] may 
be detected and analyzed in a known way and a setpoint value 

30 for a torque of the drive unit [is] may be determined. A 

setpoint value for the torque [is] may then be determined by 
taking into account setpoint values of other control systems 
received over input module 103, e.g., a traction control, a 
transmission control, etc., as well as setpoint values formed 

35 internally (limits, etc.). Then in [a preferred] an exemplary 
embodiment of an internal combustion engine control system, 
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this [is] may be converted to a setpoint value for setting the 
throttle valve, which [is] may be set as part of a position 
control loop. Furthermore, depending on the design of the 
internal combustion engine, additional performance-determining 
5 functions [are] may be provided, e.g., a control for a turbo 
charger of an exhaust gas recycling system, an idling speed 
regulation, etc. 

In addition, with internal combustion engines having direct 
10 gasoline injection, not only the air setting but also the 
determination of the fuel mass to be injected, the 
determination of an air/fuel ratio to be set, the preselection 
of the injection course (pre-in j ection, post-injection), the 
control of a charge movement valve, etc., have a crucial 
15 effect on performance, so that, in addition to the programs 

described there, a plurality of other programs [are to be] may 
be provided which have an influence on the performance of the 
internal combustion engine and thus on the safety of the 
vehicle . 

20 

This plurality of programs [is] may be filed or may be 
installed in the form of a program code in respective program 
memories 107 and 108 of the computer. The functionalities of a 
controller represented by the programs or program code in the 

25 program memory as described here [are generally] may be very 
complex. Therefore, these complex functionalities of the 
controller should be divided symmetrically between at least 
two computers in such a controller. The computers may exchange 
information, e.g., over a communication system, in particular 

30 a bus system such as a CAN bus or another serial or parallel 
interface or a memory element, in particular a DPRAM. Program 
memories 107 and 108 of two computers 101 and 102 contain the 
same program code. In addition, the identical program code [is 
also] may be executed to a great extent, but there may be 

35 individual parts which, for some reason, are processed 

asymmetrically. For example, the required programs or sections 
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to be processed asymmetrically may then be activated or 
deactivated via hardware lines and signals transmitted on 
them. For the sake of simplicity of the diagram, these line 
connections [are] may be represented by communication system 
5 105 and/or [are] may be integrated into it. 

The procedure described above is illustrated in Figure 2 with 
regard to a division of functions Fl through F4 as an example. 
The controller is again labeled as 100, and the two computers 

10 are labeled as 101 and 102. An internal combustion engine 
[having] including the respective actuators and sensors is 
labeled as 200. This specific example shows an internal 
combustion engine [having] including 12 cylinders divided into 
two cylinder blocks of six cylinders each. The 12 cylinders 

15 are [shown] only [as] an example, and it [is] may be equally 

possible for a different number of cylinders to be provided in 
respective cylinder blocks 200a and 200b, each [having] 
including the respective sensors and other actuators. Thus, in 
a 12-cylinder engine, for example, six cylinders [are] may be 

20 operated by each computer with regard to ignition and 

injection in a gasoline engine. The functionality [is] may be 
distributed symmetrically among the two computers. 
Functionality Fl controls one cylinder block with the 
respective sensors and actuators of the internal combustion 

25 engine. Sensor quantities such as the air/fuel ratio, the 
camshaft or crankshaft position, knocking information, air 
mass, etc. from internal combustion engine 200 [are] may be 
sent to computers 101 and 102, in particular their 
functionality Fl (205, 206) . Actuating signals (204, 207) from 

30 functionality Fl reach the internal combustion engine or its 
actuators. Oriented connections 204 through 207 represent the 
functionality of the transmission per se. 

Circuit [There is also the possibility of utilizing circuit] 
35 parts or sensors may be used via both processors. For example, 
the sensor, e.g., a hot film air mass flow sensor and an input 
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circuit, e.g., a low-pass filter, may be present only once for 
cost reasons, but the sensor signal, e.g., an A/D-converted 
air flow, [is] may be available to the functionalities in both 
computers . 

5 

Likewise, a controller, e.g., a secondary air pump [having] 
including the corresponding output stage in the controller may 
be operated by only one computer, whereas the respective 
engine function, e.g., the secondary air control including 
10 diagnosis, runs symmetrically in both computers and also 
supplies quantities for other engine functions. 

In addition, actuators such as secondary air valve for a first 
cylinder block may be operated by the computer for the other 
15 cylinder block, namely the second, although the respective 
engine function [is] may be running in the computer for the 
first cylinder block. 

The [Another possibility is for the] program code for 
20 operation of the actuator, e.g., for regulating the position 
of the throttle valve, [to] may run symmetrically in both 
computers, in which case, however, the output stage and the 
actuator [are] may be operated on one cylinder block, but on 
the other cylinder block the signal from the computer [is] may 
25 be not used for control purposes. 

Due to the exemplary embodiments described above as well as 
the following description of the tank system, [it is obvious 
that] despite the identity of the functionalities and the 
30 program code, certain asymmetries [are possible] may be 
provided . 

Additional peripherals such as a tank system 201 [are] may be 
controlled and monitored by another functionality F2 . This 
35 functionality F2 [is] may be likewise contained symmetrically 
in both computers 101 and 102. However, it [is] may be 
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processed only asymmetrically by computer 101, for example. 
Therefore, this functionality F2 [is] may be activated or 
deactivated by signals of separate hardware lines or by 
unambiguous signals or data over the communication system. 
5 Thus, if there is only one tank in the vehicle, diagnosis of 
the tank is performed in only one computer. Although 
corresponding functionality F2 is present on both computers in 
the program memory, it is activated on only one side. The 
communication relationship between functionality F2 in 
10 computer 101 and tank system 201 [is] may be represented by 
connections 202 and 203. 

In addition, functionalities F3 and F4 may also be provided 
for other peripheral elements, so that, on one hand, sensor 

15 elements 209 and 210 may be input and processed via 

communication link 213 and 214 (F3) . On the other hand, 
control elements, actuators 208 and 211 may also be operated 
via communication links 212 and 215 by functionalities F4 . 
Likewise, quantities to or from other control systems such as 

20 a traction control, a transmission control, etc. may be 

relayed via oriented connections 212 through 215. If sensor 
element 209 and control element 208 are elements of the same 
control loop, functionalities F3 and F4 may also be considered 
together as functionality F34. 

25 

Figure 3 shows [a very special] an exemplary embodiment of a 
12-cylinder engine having a concrete functionality. Thus, this 
12-cylinder engine [has] may have four parallel exhaust gas 
lines, for example, [having] including four regulating probes 

30 310 through 313, combined as lambda probes 300. Thus a quadro 
lambda regulation would have to be provided in the engine 
control unit, but because of its high complexity this entails 
not only increased costs but also risks with regard to 
malfunctions, in particular security risks. Due to the 

35 symmetrical division of functions between two computers, there 
[is] may be only one stereo-lambda regulation in each computer 
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101 or 102 in controller 100, i.e., the functionality [is] may 
be far less complex. The signals supplied by probes 310 
through 313 go via interfaces 314 through 317 for hardware 
processing. This signal processing takes place through 
5 elements 308 and 309 for computer 101 and through elements 306 
and 307 for computer 102. Probe signals US1 and US 2 [are thus] 
may be sent to computer 102, and probe signals US3 and US4 
[are] may be sent to computer 101. 

10 Thus only two probe signals [are] may be analyzed in each 

computer, and the lambda regulation factors act, as explained 
later, only on six injectors via the injection calculation. 
Then, as stated previously, the same-stereo lambda regulation 
[is] may be performed in block 304a and 304b. To do so, 

15 processed probe signals US1 and US2 enter the regulation as 
probe signals USX and USY. Likewise, processed probe signals 
US3 and US 4 in block 304b also enter as USX and USY into the 
same stereo-lambda regulation. Regulating factors FRX and FRY 
that are obtained from the stereo-lambda regulation [are] may 

20 be relayed to downstream blocks 305a and 305b for computer 102 
and computer 101, respectively. 

Based on regulation factors FRX and FRY, the same injection 
calculation [is] may then be performed in blocks 305a and 305b 
25 for six injectors in this exemplary embodiment. The resulting 
output quantity groups 318 and 319 [are] may then be relayed 
to output stage blocks 320 and 321. 

On the basis of the same program code or the identical 
30 functionalities, the function blocks are also identical. 
Likewise, input quantities, output quantities and state 
variables of computers 101 and 102 have identical 
designations. Output quantities 318 and 319 are equally 
designated as til through ti6, although they have physically 
35 different meanings. Thus, til [is] may be used once for 

controlling injector 1, EV1, and once for controlling injector 
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7, EV7 . However, this has no relevance for the function or 
functionality or the program code. Injectors 301 [are] may 
then be controlled via interface 302 or 303 from output stage 
blocks 320 and 321. 

The symmetrical distribution of functions discussed above is 
illustrated in Figures 1, 2 and 3, although parts may be 
processed asymmetrically. Nevertheless, the functionality and 
the program code are identical for both computers and are run 
through in both computers independently of one another. There 
is no redundancy and there are no emergency operating 
properties in sensors, output stages or functionality. Such a 
redundancy would have to be generated additionally, 
independently of the [concept] exemplary embodiments according 
to the present invention. 
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[Abstract] 

ABSTRACT OF THE DISCLOSURE 
A method and a device for controlling a drive unit, in 
particular of an internal combustion engine in a vehicle [are 
described, and] in which at least one performance quantity of 
the drive unit is detected and at least one actuator of the 
drive unit is controlled with controlled variables, depending 
on this performance quantity, according to predefinable or 
preselectable functionalities. In a controller, at least two 
processors process the possible functionalities, where these 
functionalities are defined by program code in at least one 
assigned program memory per processor. These possible 
functionalities of the processors, i.e., the program codes in 
the program memories assigned to the processors are identical. 

[ (Figure 3) ] 
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